Vulnerability intelligence

CVE-2026-17250

TP-Link Systems Inc. TL-MR6400 v7.0 CWE-121

A stack-based buffer overflow vulnerability exists in the firmware update functionality of TL-MR6400 v7 due to unsafe processing of attacker-controlled metadata within a firmware image. Successful exploitation may allow an authenticated attacker to trigger memory corruption and execute arbitrary code on the affected device.

CVSS Score

8.5

High

EPSS — Exploit Probability

0.3%

Riskier than 20% of all CVEs · checked 2026-10-08

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published